Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214965.roa
File: AS214965.roa (raw, json)
Hash identifier: yNubLC5bLyI6q5UsNEXclk07yyNypob1HeO80IExmxY=
Subject key identifier: 14:7C:A5:91:36:31:7A:5E:41:CD:1F:05:22:FB:5D:1F:EE:51:D0:C5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 19A6D4FECB10F7FE25113AFCF86F92E2B581F16E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214965.roa
Signing time: Mon 13 Apr 2026 09:47:05 +0000
ROA not before: Mon 13 Apr 2026 09:42:05 +0000
ROA not after: Mon 12 Apr 2027 09:47:05 +0000
asID: 214965
IP address blocks: 143.14.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a6:d4:fe:cb:10:f7:fe:25:11:3a:fc:f8:6f:92:e2:b5:81:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 13 09:42:05 2026 GMT
Not After : Apr 12 09:47:05 2027 GMT
Subject: CN=147CA59136317A5E41CD1F0522FB5D1FEE51D0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:4e:ff:90:b9:32:35:82:4b:78:a5:49:60:
81:a4:d2:73:e4:6b:c7:5a:2a:f5:fe:f7:4e:f3:41:
ed:67:1c:6c:bd:68:11:a5:ae:38:c9:77:a2:b7:d7:
86:b4:d5:2c:67:2f:ae:76:a1:49:35:7d:ea:c2:6e:
cc:82:59:cf:14:cc:d3:df:af:44:19:9e:90:59:fb:
0a:9d:43:a4:4c:35:8d:8e:12:50:a2:dd:85:fd:35:
01:ee:77:e7:89:a3:24:76:63:66:fa:0f:51:fd:e0:
b9:3c:ef:33:6b:be:5b:eb:e2:06:fa:c7:0d:a2:ae:
29:d8:07:fa:b5:0d:a7:8b:d0:d7:81:61:fe:de:25:
46:b0:a6:94:4d:fd:39:6c:9a:32:75:4d:1d:b2:be:
3c:57:e9:b5:10:59:9a:b6:a7:06:59:aa:df:ca:81:
61:7c:28:23:ed:3c:8e:0a:09:60:20:55:07:b5:d6:
47:69:f5:12:66:59:62:78:28:29:b2:2d:70:da:38:
17:8c:20:bf:92:46:07:97:d1:3a:41:24:21:86:79:
b7:9f:d2:56:8c:af:0c:91:ef:5a:68:20:95:9b:4a:
0a:ef:46:c7:02:ad:bd:62:ae:ec:c9:3c:a4:86:90:
cf:dd:6b:b4:be:7e:ba:54:6b:41:7c:1c:d5:ce:21:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7C:A5:91:36:31:7A:5E:41:CD:1F:05:22:FB:5D:1F:EE:51:D0:C5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fc:92:a2:71:68:f9:58:c8:8b:60:5d:1e:b0:84:82:67:b2:
d2:72:37:16:b4:5f:41:c2:97:19:cc:83:11:ae:87:df:53:b8:
cb:20:a4:1f:a6:4d:50:e6:2a:05:a9:15:74:9f:a8:e9:70:9c:
a7:17:9d:ec:89:cf:76:45:59:09:7a:6b:dc:3b:3a:bc:3e:e2:
25:4e:ef:44:1e:c8:8d:80:c5:e0:69:c4:be:43:0c:ae:a8:bc:
21:51:f3:ec:c3:56:bb:15:15:a8:49:2f:b1:6c:67:90:7a:90:
2a:92:65:28:56:26:49:5c:26:d3:04:86:b6:36:6d:0c:28:4d:
b3:41:53:1a:88:d0:0b:f1:f0:50:3c:30:e2:41:25:3c:ad:9f:
12:9c:06:8e:a3:66:54:ee:f5:1a:84:d9:d1:c2:f2:b8:a2:6f:
43:ea:38:a7:d8:11:79:20:fb:29:ab:e9:db:f6:87:05:96:d3:
6d:64:47:13:7c:f6:43:61:2a:13:44:ba:6c:c5:69:76:ff:c8:
ae:60:08:d0:30:05:dc:fc:62:78:5a:29:93:74:99:0e:44:6c:
36:2d:87:ff:8c:24:30:51:67:6a:e2:b8:58:8c:ea:70:9e:0f:
6d:74:77:91:17:97:b3:f9:3b:37:d6:fb:d6:03:10:5a:56:d9:
29:92:aa:98
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGabU/ssQ9/4lETr8+G+S4rWB8W4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA0MTMwOTQyMDVaFw0yNzA0MTIwOTQ3MDVaMDMxMTAvBgNV
BAMTKDE0N0NBNTkxMzYzMTdBNUU0MUNEMUYwNTIyRkI1RDFGRUU1MUQwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZU7/kLkyNYJLeKVJYIGk0nPk
a8daKvX+907zQe1nHGy9aBGlrjjJd6K314a01SxnL652oUk1ferCbsyCWc8UzNPf
r0QZnpBZ+wqdQ6RMNY2OElCi3YX9NQHud+eJoyR2Y2b6D1H94Lk87zNrvlvr4gb6
xw2irinYB/q1DaeL0NeBYf7eJUawppRN/TlsmjJ1TR2yvjxX6bUQWZq2pwZZqt/K
gWF8KCPtPI4KCWAgVQe11kdp9RJmWWJ4KCmyLXDaOBeMIL+SRgeX0TpBJCGGebef
0laMrwyR71poIJWbSgrvRscCrb1iruzJPKSGkM/da7S+frpUa0F8HNXOITATAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUFHylkTYxel5BzR8FIvtdH+5R0MUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE0OTY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw6s
MA0GCSqGSIb3DQEBCwUAA4IBAQAq/JKicWj5WMiLYF0esISCZ7LScjcWtF9BwpcZ
zIMRroffU7jLIKQfpk1Q5ioFqRV0n6jpcJynF53sic92RVkJemvcOzq8PuIlTu9E
HsiNgMXgacS+QwyuqLwhUfPsw1a7FRWoSS+xbGeQepAqkmUoViZJXCbTBIa2Nm0M
KE2zQVMaiNAL8fBQPDDiQSU8rZ8SnAaOo2ZU7vUahNnRwvK4om9D6jin2BF5IPsp
q+nb9ocFltNtZEcTfPZDYSoTRLpsxWl2/8iuYAjQMAXc/GJ4WimTdJkORGw2LYf/
jCQwUWdq4rhYjOpwng9tdHeRF5ez+Ts31vvWAxBaVtkpkqqY
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:30:24 2026 by rpki-client